IAM
Identity and Access Management
Motto’s Identity and Access Management (IAM) system allows you to control who has access to what resources in the Motto systems. This is done by associating accounts with roles and resources. To learn more about the concepts around Motto IAM, read on.
Concepts
Organization
An organization typically represents a single Motto customer. It can hold one or more projects, and is the level at which billing is managed. It is also the most fundamental resource in the Motto systems.
Project
A project is a fully isolated container that can help organize content and allows for more fine-grained access control. For example, if you are streaming football content for two different leagues that have no overlap between them, you may want to consider using a separate project for each. This has various benefits, like making it easier to create a separate OTT platform for each of these leagues, and allowing for more fine-grained access control.
If your content is strongly connected but you still want to achieve things like multiple OTT platforms or fine-grained access control, Motto is flexible enough to support this. Please reach out to our Solutions Team.
Resource
A resource is any object in the Motto systems: organizations, projects, events, videos, assets, etc. Every resource sits within a resource hierarchy, which determines what resources are the hierarchical parent(s) of this resource. By default, the project is a parent to every resource (and the organization is always a parent of the project), leading to a hierarchy like this
- Event -> Project -> Organization.
However, you can change this hierarchy to suit your needs. For example, you may want to have an Entity
resource be the
parent of an Event
resource, and the Event
be a parent of a Video
. This would create a resource hierarchy like:
- Video -> Event -> Entity -> Project -> Organization.
In this example, such a resource hierarchy would allow you to grant Studio access to a broadcasting partner for only a
single competition or venue (which are Entity
objects in this example), and they would automatically receive access to all necessary lower-level resources.
Account
An account represents a person or machine inside the Motto systems. An account can be associated with more than one organization, and the Studio makes it easy to switch between these contexts. Accounts are not resources themselves, but rather allow access to resources.
We currently do not support service accounts.
We avoid calling accounts users, as that term is reserved for end-consumers (i.e. the people interacting with our Content Delivery API, video player or OTT platforms).